Monday, June 4, 2012

BeEF 0.4.3.5

So, here we are with a fresh new BeEF release!

For those who want to know more about our development lifecycle, have a look here.

Obviously, with an Open Source project, it's a bit difficult to commit (well push, we're using Git at the end) the same amount of code/time every month, so it's normal to have months with more new features and addressed issues.

Last month's release (0.4.3.5) was full of new code added to the repo. I will cover the main changes.



We added experimental support to WebSockets as an alternative communication channel. The server-side handlers are event-based for performance reasons, and right now it works smoothly in Chrome/Safari and Firefox latest versions. To give it a try, modify beef.http.websocket.enable to true in the main config.yaml file. Using WebSockets the communication is much faster, especially when dealing with large requests (Tunneling Proxy) or an high number of command modules. The WebSockets work is a joint effort between Graziano Felline and Michele. The experimental branch was presented and demo'ed for the first time at AthCon 2012, together with the RESTful API. Have a look at antisnatchor blog for more information.

Antisnatchor (there are rumors in the BeEF dev team that he has a time-machine, and won't release its secrets :-)) added experimental support to Obfuscation. Disabled by default, enable the extension at beef.extension.evasion.enable at the end of the main config.yaml file if you want to play with it. The purpose of the extension is to reduce the likelihood that the BeEF hook will be detected by RegEx'es and Layer 7 filters. Obviously a manual analysis (a la sla.ckers) will reveal the goodness, but still the extension enables you to combine and chain multiple techniques as you most like it. Right now, when enabled, the main hook file and the code sent with modules is scrambled (random string substitution), minified and base64'ed. The extension is ready to accept new obfuscation techniques, have a look at the code here.

Brendan was very helpful with testing and module coding as always. He added a couple of XSRF modules for the Huawei SmartAX MT880 router and the Dlink DCS series camera, and updated the Deface Web Page module to change the page title and favicon. He added the first BeEF clickjacking module that can be used as a template for more specific attacks: an invisible iframe follows the mouse cursor. Right now, this works in Firefox and Chrome, but not yet in Internet Explorer. The code is here. Finally, he also added Cross-Site Printing (XSP) module which allows you to print to printers with port 9100 open. By default, this prints BeEF ASCII art.

Mike also committed awesome modules this time. Thanks to him, our social engineering modules are growing. He developed a module that prompts the user to install a fake Flash player update which is really a malicious Chrome extension (code). This is very nice because the extension can issue CrossDomain requests, have access to tabs, and be the launch point for other modules: Inject BeEF in all tabs, steal Google contacts, or a new one Mike added recently to steal all cookies from all tabs, including those marked with the HttpOnly flag (code).

Christian Frichot ruined his mind implementing some recursive code to enable nested module sub-categories, both in the module definition and in the admin UI. His work was really great and now for example we have the Exploit category, with general exploits and then Router and Camera sub-categories. He also added the Mobile Safari iOS 5.1 Address Bar Spoofing module, thats works great for non-patched versions.

Bart Leppens, a new recruit, added a few nice modules like the Glassfish WAR upload through XSRF (originally discovered by @malerisch, here), the frame sniffing module using LeakyFrame by Paul Stone, and a Netgear GS108T managed switch XSRF module.

Last, but not least because is pretty cool, the Heretic Clippy code has been integrated in BeEF by Nick Freeman and Denis Andzakovic: have fun tricking an IE victim to download what you want through this module :D

That's all for this release. Thanks again to everyone who contributed, and let us know if you have some cool code/feature you want to add to BeEF.

Last update, if you're around in Bochum, Germany don't miss @antisnatchor presentating at HackPra the 20th of June, and the 6th of July in Lisboa, Portugal at Just4Meeting.

104 comments:

  1. yep , BeEf starting to be a pretty nice tool :)

    ReplyDelete
  2. I think that you need to check this blog article for some interesting info on how to write essay topic. This could be really handy in the future

    ReplyDelete
  3. really nice blog and very useful.
    It is innovative.hadoop training in chennai

    ReplyDelete
  4. Good Post! Thank you so much for sharing this pretty post, it was so good to read and useful to improve my knowledge as updated one, keep blogging.

    Selenium with python Training in Electronic City

    ReplyDelete
  5. Mobiastuce
    Get your hands on unlimited pc & mac torrent applications. You can easily download and install these premium applications on your macbook mobiastuce.com

    ReplyDelete
  6. The article you have shared here very awesome. I really like and appreciated your work. I read deeply your article, the points you have mentioned in this article are useful
    raft wars 2

    ReplyDelete
  7. Assignment Help Online provides you best support on the assignment related to management and business and business operations. Programming Help

    ReplyDelete
  8. There are many students who search for such services for the very first time and they have an array of questions in their mind. Many of them want to know the scope of assignment help online services. Law Assignment Help
    Programming Assignment Help

    ReplyDelete
  9. Buy assignment and essay help Adelaide from StudentsAssignmentHelp.com at a very low price. Students can improve their grades by hiring our expert writers.

    ReplyDelete
  10. Being an academic writer from past 5 years providing assignment help uk to college and university students also associated with Myassignmenthelp platform. I am dedicated in providing best online academic writing services to the college students at the affordable rates.

    ReplyDelete
  11. Students need not struggle so much with their assignments and they should seek our research paper assistance when they can easily get professional research paper help online from us.

    ReplyDelete
  12. Amazing Article ! I have bookmarked this article page as i received good information from this. www.appslure.com

    ReplyDelete
  13. النمل الأبيض الحشرة الخرسانية على أعمال الفتحات بين المبنى و الأبواب تعمل وكذلك النوافذ مما يؤدي إلى تآكل تلك الأبواب والنوافذ وتلفها بشكل دائم وبالتالي يجب مكافحة الحشرات والقضاء عليها تمامًا من خلال الاتصال بشركتنا لمكافحة النمل الأبيض ، الشركة على الفور من خلال عدد موحد لديناشركة مكافحة حشرات

    ReplyDelete
  14. MyAssignmnetHelpAu providing students Assignment Help. If need Assignment Help. Then Contact our expert team. Our professionals follow a standard assignment writing style and make sure that there are no spelling or grammatical mistakes in your assignments. Our expert available 24*7. You have also visited our website.

    ReplyDelete
  15. Thanks for giving these excellent information, you have a very good post. Such a lovely posting.
    Assignment Writing Service
    Online Assignment Help
    Free Plagiarism Report

    ReplyDelete
  16. This comment has been removed by the author.

    ReplyDelete
  17. Windows 10 Movie maker can be acquired for Windows 10 users by downloading the Windows Essentials software suite.

    ReplyDelete
  18. The most convenient issue is that you can access the Affordable Editing Services at any time and location as long as you have Internet connectivity. You are offered the Dissertation Literature Review by the agency.

    ReplyDelete
  19. Thanks for sharing such a great blog... I am impressed with you taking time to post a nice info.
    iPad Application Development
    Hybrid App Development
    Web Development Services

    ReplyDelete
  20. Hello Admin!

    Thanks for the post. It was very interesting and meaningful. I really appreciate it! Keep updating stuffs like this. If you are looking for the Advertising Agency in Chennai / Printing in Chennai , Visit us now..

    ReplyDelete
  21. نأمل أن تبقى النمل الأبيض بعيدًا عن الحضارة ويعيش خارج المدن. أو مجرد العيش في الخارج ، بعيدا ، بعيدا عن الممتلكات الخاصة بك. يمكن أن تكون الرطوبة ضمن سيطرتك. التأكد من أن الرطوبة تنجرف بعيدا عن غرفة الغسيل والحمام ستكون كافية. إن الحد من أو تخزين الورق أو الورق المقوى أو أي شيء يحتوي على السليلوز بشكل صحيح سيقلل من إمكانية وصول النمل الأبيض إلى منزلك.
    شركة مكافحة حشرات بالاحساء
    شركة مكافحة حشرات بالدمام

    ReplyDelete
  22. You need to realize the significance of assignment help service given by expert writers, and here we are revealing some key points which escort you to get advantage from New assignment help services.

    ReplyDelete
  23. Bring depth and warmth to your home interior with our selection of natural stone tiles. Each tile is uniquely variegated and textured for an authentic feel - Buy My Stone

    ReplyDelete
  24. Your blog is filled with unique good articles! I was impressed how well you express your thoughts.
    Facebook for PC

    ReplyDelete
  25. Le déménagement n'a rien de stressant. Même si vous commencez à emballer un mois à l'avance et que vous obtenez beaucoup de l'une des sociétés de déménagement bon marché recommandées par un ami, il y a encore beaucoup à craindre.شركة نقل اثاث
    شركة نقل عفش بالخرج

    ReplyDelete
  26. The entire bit of online TV has changed the way wherein where we are checked. You can completely swear off the tumult of TV adverts and spotlight on getting the news. mediosindependientes

    ReplyDelete

  27. نقل عفش

    نقل عفش من الرياض الى مصر نقل عفش من الرياض الى مصر
    نقل عفش بالدمام نقل عفش بالدمام
    نقل عفش بالاحساء نقل عفش بالاحساء
    نقل عفش داخل مكة نقل عفش داخل مكة

    ReplyDelete
  28. Document translation services Singapore deliver the best translation,proofreading,editing services to help boost the grades and assist students in learning the subject and associated concepts.

    ReplyDelete
  29. Get the best assignment help in Australia by experts at affordable prices. Our assignment writing services are risk free and are assured,Place your order today and receive assignment writing services online from our expert assignment

    ReplyDelete
  30. Get the best assignment help from sydney by experts at affordable prices. Get best assignment writing services by professional assignment writers of Sydney. On-Time Delivery. A+ Quality.

    ReplyDelete
  31. Get the best assignment help from canberra by experts at affordable prices. Get best assignment writing services by professional assignment writers of Canberra. On-Time Delivery. A+ Quality.

    ReplyDelete
  32. Get the best assignment help from darwin by experts at affordable prices. Get best assignment writing services by professional assignment writers of Darwin. On-Time Delivery. A+ Quality.

    ReplyDelete
  33. Get the best assignment help from melbourne by experts at affordable prices. Get best assignment writing services by professional assignment writers of Melbourne. On-Time Delivery. A+ Quality.
    Assignment Help Australia

    ReplyDelete
  34. Get the best assignment help from gold coast by experts at affordable prices. Get best assignment writing services by professional assignment writers of Gold Coast. On-Time Delivery. A+ Quality.

    ReplyDelete
  35. Get the best assignment help hobart from hobart by experts at affordable prices. Get best assignment writing services by professional assignment writers of Hobart. On-Time Delivery. A+ Quality.

    ReplyDelete
  36. Get the best assignment help adelaide from adelaide by experts at affordable prices. Get best assignment writing services by professional assignment writers of Adelaide. On-Time Delivery. A+ Quality.

    ReplyDelete
  37. Get the best assignment help perth from perth by experts at affordable prices. Get best assignment writing services by professional assignment writers of Perth. On-Time Delivery. A+ Quality.

    ReplyDelete
  38. Get the best assignment help brisbane from brisbane by experts at affordable prices. Get best assignment writing services by professional assignment writers of Brisbane. On-Time Delivery. A+ Quality.

    ReplyDelete
  39. Get the best assignment help wollongong from wollongong by experts at affordable prices. Get best assignment writing services by professional assignment writers of Wollongong. On-Time Delivery. A+ Quality.

    ReplyDelete
  40. Get the best assignment help newcastle from newcastle by experts at affordable prices. Get best assignment writing services by professional assignment writers of Newcastle. On-Time Delivery. A+ Quality.

    ReplyDelete
  41. Get the best assignment help toowoomba from toowoomba by experts at affordable prices. Get best assignment writing services by professional assignment writers of Toowoomba. On-Time Delivery. A+ Quality.

    ReplyDelete
  42. Get the best cheap assignment help from Australia by experts at affordable prices. Get best assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  43. Get the best accounting assignment help from Australia by experts at affordable prices. Get best assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  44. Get the best marketing assignment help from Australia by experts at affordable prices. Get best marketing assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  45. Get the best law assignment help from Australia by experts at affordable prices. Get best law assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  46. Get the best mba assignment help from Australia by experts at affordable prices. Get best mba assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  47. Get the best university assignment help from Australia by experts at affordable prices. Get best university assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  48. Get the best perdisco assignment help from Australia by experts at affordable prices. Get best perdisco assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  49. Need for Common Law Assignment Help online to the students at best price. We Provide Best Quality Assignment Help and Writing Services in UK from our best assignment writers expert

    ReplyDelete
  50. Need Taxation Law Assignment Help in UK? Get instant taxation writing assignment help by professional law experts globally from UK Assignment Help.

    ReplyDelete
  51. Get the best assignment help from Australia by experts at affordable prices. Get the best assignment writing services by professional assignment writers of Australia. On-Time Delivery. A+ Quality.

    ReplyDelete
  52. Get help from Dissertation Writing ServicesDissertation writing Services UK will help you get the grades you need on your Masters dissertation. Our professional dissertation writers can provide cost-effective solutions.Get your Dissertation Writing Services completed and delivered on time by the best service. Best Price, Plagiarism Free work,Guaranteed better Grades,On Time Delivery.

    ReplyDelete
  53. Forex Signals, MT4 and MT5 Indicators, Strategies, Expert Advisors, Forex News, Technical Analysis and Trade Updates in the FOREX IN WORLD

    Forex Signals Forex Strategies Forex Indicators Forex News Forex World

    ReplyDelete
  54. Looking For Best Online Statistics Assignment Help and writing service from UK? Assignment help experts offers well researched and affordable price Assignment Writing to the students.

    ReplyDelete
  55. Very interesting blog. Many blogs I see these days do not really provide anything that attracts others, but believe me the way you interact is literally awesome.You can also check my articles as well.

    Home Garden Blogs

    Thank you..

    ReplyDelete
  56. Are You Need Management Assignment Help UK? Get the online Management writing services in the USA. So, contact our writing service and get instant assistance. ORDER NOW! On-time Delivery,100% original work,24/7 help.

    ReplyDelete
  57. Very interesting blog. Many blogs I see these days do not really provide anything that attracts others, but believe me the way you interact is literally awesome.You can also check my articles as well.

    Security Guard License
    Ontario Security License
    Security License Ontario
    Security License

    Thank you..

    ReplyDelete
  58. Thank you for your outstanding article. You will always find clients coming back to us which is a result of our excellent services. Our goal is to offer unique and specialized services to our clients and in return create a long-lasting working relationship. The best thing about working with us being that, we provide samples for any client who would want to see some before ordering from us. Learn more from Nursing Care Plan.

    ReplyDelete
  59. This blog was really good formatting, thanks for sharing with us. Visit Ogen Infosystem for professional website designing and digital marketing services at good price.
    Website Designing Company in Delhi

    ReplyDelete
  60. it is really a great and helpful piece of info. I am glad that you shared this helpful information with us. Please keep us informed like this. Thank you for sharing.
    malaysia embassy singapore

    ReplyDelete
  61. Buy bone inlay nightstand, alternatively e table or bedside table in the USA.Take a look at the amazing collection of cabinets, and bedside tables etc. For more information visit here: Luxuryhandicrafts

    ReplyDelete
  62. Buy 650 more then responsive Mailchimp email Templates pre-designed landing page templates include all the design elements you need to create a professional looking landing page in minutes.For more information visit here: Mailerstock

    ReplyDelete
  63. Thank you for sharing such a useful post .Natural Blue Sapphire Ring is artistically made according to the astrological needs.shop now and get 40% discount at ornate jewels

    ReplyDelete
  64. I enjoyed over read your blog post. This was actually what i was looking for and i am glad to came here!
    Website: Imitation jewellery

    ReplyDelete
  65. Amazing Article,Really useful information to all So, I hope you will share more information to be check and share here.thanks for sharing .
    Website: Best Adventure Tour Packages

    ReplyDelete
  66. Thank you for sharing such a useful post. Exclusive collection of kids jewellery for the little angels includes a range of bracelets, earrings, bangles, and necklaces.

    ReplyDelete
  67. Very interesting blog. Many blogs I see these days do not really provide anything that attracts others, but believe me the way you interact is literally awesome.You can also check my articles as well.

    Rowe Rowe
    Rowe Rowe Interval

    Thank you..

    ReplyDelete
  68. Buy mother of pearl box and other mother-of-pearl decorative objects from the world's best dealers at Luxury Handicrafts Global free shipping available.

    ReplyDelete
  69. Select our best Newsletter Email Template online from our template library to use on your next email marketing campaign. Choose, Customize, and many more at mailerstock

    ReplyDelete
  70. Arga detectives es una agencia de investigación privada con gran experiencia. contacta con los mejores detectives privados en Madrid. Solicita presupuesto gratuito de detectives privados en España al mejor precio.

    Detectives privados
    private investigators madrid

    Thank you..

    ReplyDelete
  71. It is really a great and helpful piece of info. I am glad that you shared this helpful information with us. Please keep us informed like this. Thank you for sharing.
    Project Management Courses In Hyderabad

    ReplyDelete
  72. Thank you so much for sharing this great article topic. Very inspiring and helpful too. I Hope you continue to share more of your tips and suggtions. I will definitely love to read. Thank you so much. dissertation introduction -
    engineering assignment help -
    statistics assignment help

    ReplyDelete
  73. Very interesting blog. Many blogs I see these days do not really provide anything that attracts others, but believe me the way you interact is literally awesome.You can also check my articles as well.

    Rental Properties & Dubai Real Estate
    Off Plan Properties Dubai

    Thank you..

    ReplyDelete
  74. I see your twitter profile in the above and want to share with you site https://soclikes.com/ where you can get twitter followers

    ReplyDelete
  75. Wales publications research grant UK breaks the barrier to getting the research from the developing countries and by publishing their research in international journals and encounter the issues that researcher faces across all developing countries,
    by providing them active opportunities to fill the gap between the scientific knowledge and new technology development.

    ReplyDelete
  76. Wales Publications is a research publishing solution provide best Publication Research In UK
    in all issues from research to the journal publication are catering in your discipline based on your requirements.

    ReplyDelete
  77. Exactly what i was looking for. PowerPoint presentation online is a service which has gained popularity both among students and professionals. Making a PowerPoint is a skill which needs to be learned by every student. Universities are more into looking at presentation for an assessment rather than the report due to its precise content. It helps in understanding the basic principles and arguments present in an elaborated task. Read more about PowerPoint Homework Help

    ReplyDelete
  78. Thank you for sharing this post.Buy Exclusive Collection of Silver Bangles for every occasion. Discover silver bangles for girls and woman. we have various varitey of bangles including american diamond bangles, Ruby bangles designs, sapphire bangles online now and many more!

    ReplyDelete